nTimetools
A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.

nTimetools
A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.
nTimetools Description
nTimetools is a suite of console tools developed to work with timestamps in Windows. nTimetools comprises 2 tools that allow both forensic analysts as well as red teamers to modify and verify file timestamps up to 100-nanosecond precision. nTimeview allows forensic analysts to view the MACB timestamps of files on a live system. It uses the undocumented NtQueryInformationFile API. As such, it works on NTFS/FAT and even mapped drives. It does not require privileged access. nTimestomp allows red teamers to timestomp MACB timestamps of files with 100-nanosecond level precision. Forensic analysts are usually taught to spot 0s in the millisecond position as evidence that timestomping has occurred.
nTimetools FAQ
Common questions about nTimetools including features, pricing, alternatives, and user reviews.
nTimetools is A suite of console tools for working with timestamps in Windows with 100-nanosecond precision.. It is a Security Operations solution designed to help security teams with Digital Forensics, Red Team, Windows.